Lead Security Engineer - Dotnet Core, Docker, Kubernetes

Benefits

JPMorganChase offers a comprehensive benefits package to support your health, retirement planning, and overall well-being.

• comprehensive health care coverage
• on-site health and wellness centers
• a retirement savings plan
• backup childcare
• tuition reimbursement
• mental health support
• financial coaching

Responsibilities

Based in Columbus, OH on-site, this Lead Security Engineer role operates within Cybersecurity Technology & Controls to design and deliver secure, high-quality software solutions and tamper-proof security controls at scale, with AI-assisted development practices across multiple technology domains.

• Architect and implement large-scale security engineering solutions, leveraging established patterns to meet the needs of internal product teams, platform owners, and application stakeholders.
• Write secure, robust production code and maintain algorithms that integrate with relevant systems, ensuring reliability and data integrity at scale.
• Utilize enterprise AI tools to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, while validating results and safeguarding sensitive data.
• Employ targeted vulnerability scanning and analysis tools to correlate incidents, identify threats, quantify risk probability and impact, and surface hidden issues to improve coding hygiene and system design.
• Create architecture and design artifacts for complex applications, ensuring constraints are met throughout the engineering lifecycle.
• Use AI-assisted development tools like GitHub Copilot to speed secure software delivery, including refactoring, test generation, and code review support, while upholding secure coding practices and accountability.
• Support agentic AI initiatives, performing threat modeling for AI behaviors, establishing guardrails, and implementing approval and audit logging where appropriate.
• Lead continuity and security readiness through awareness programs, training sessions, and practical exercises.
• Adopt reuse-first, AI-assisted practices in SDLC and toolchains to strengthen security testing and control validation, maintaining traceability and alignment with resiliency and security standards.

Requirements

• Formal training or certification on security engineering concepts and 5+ years of applied experience
• Proficiency in C# on .NET 6 or later and SQL Server/T-SQL for enterprise application development
• Solid understanding of the Software Development Life Cycle and hands-on experience with version control and pipeline tools such as Git, Bitbucket, GitHub, or Jenkins
• Strong working knowledge of information and network security, IT risk management, and architectural concepts and patterns
• Demonstrated understanding of agile methodologies, continuous integration and delivery practices, and application resiliency principles
• Experience applying specialized development and security tools such as Visual Studio and code quality analysis platforms
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity
• Ability to review and validate AI-assisted code and security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations
• Proficiency using AI-assisted development tools, including GitHub Copilot, for code generation, refactoring, test creation, and code review assistance within secure usage practices
• Strong analytical and problem-solving skills with the ability to identify, interpret, and communicate complex security risks clearly

Technologies

• C#, .NET 6
• SQL Server
• T-SQL
• Git
• Bitbucket
• GitHub
• Jenkins
• Visual Studio
• GitHub Copilot
• Docker
• Kubernetes
• Blazor
• Razor
• MVC frameworks
• Entity Framework
• Entity Framework Core

Preferred Qualifications, Capabilities, and Skills

• Experience designing and delivering agentic AI solutions, including multi-step workflows, tool and function calling, and human-in-the-loop approval patterns
• Familiarity with GenAI solution patterns such as retrieval-augmented generation, embeddings and vector search, and document ingestion pipelines within the .NET ecosystem
• Experience with modern front-end technologies including Blazor, Razor, or MVC frameworks and Entity Framework or Entity Framework Core
• Familiarity with containerization and orchestration technologies such as Docker and Kubernetes
• Experience with multi-threading techniques and asynchronous programming patterns in .NET applications
• Exposure to cloud technologies with a certification in one or more major cloud providers